From 0c9654585c8b7d6e4b270ce3449090be6185553c Mon Sep 17 00:00:00 2001 From: Franck Cuny Date: Sat, 7 Jan 2023 13:37:21 -0800 Subject: fix(modules/sendsms): run it as root for now I need to figure a way to make it run as a dynamic user, while still having access to the credentials for twilio, while not changing the permissions to the file. --- modules/services/sendsms/default.nix | 2 -- 1 file changed, 2 deletions(-) (limited to 'modules/services/sendsms') diff --git a/modules/services/sendsms/default.nix b/modules/services/sendsms/default.nix index 1238c5c..9d3491a 100644 --- a/modules/services/sendsms/default.nix +++ b/modules/services/sendsms/default.nix @@ -17,7 +17,6 @@ in path = [ pkgs.sendsms ]; serviceConfig = { Type = "oneshot"; - WorkingDirectory = cfg.stateDir; ExecStart = "${pkgs.sendsms}/bin/sendsms --config ${secrets."sendsms/config".path} reboot"; Restart = "on-failure"; @@ -32,7 +31,6 @@ in CapabilityBoundingSet = ""; # Security - DynamicUser = true; NoNewPrivileges = true; # Sandboxing -- cgit 1.4.1